Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-23341

Incorrect role/policy subtree limitation handling in section/assign

    XMLWordPrintable

    Details

      Description

      When a user/group has multiple roles assigned, and one of the roles has a subtree limitation, section/assign will not consider other (more permissive) roles/policies.

      Steps to reproduce:
      1. Create role 1: section, assign, NewSection( Standard , Media , Restricted )
      2. Create role 2: section, assign, NewSection( Standard , Media , Restricted )
      3. Create Folder 'TestFolder' under root, and article 'TestArticle' beneath.
      4. Create user 'TestUser' under group Editors
        1. Assign role1 to 'TestUser' with subtree limitation /TestFolder
        2. Assign role2 to 'TestUser' without limitations.
      5. Login with 'TestUser'
        1. Edit 'TestArticle', verify that modifying section works as intended.
        2. Edit other content outside of the '/TestFolder' path, verify that setting section does not work.

      The following will be displayed in error.log:

      [ Sep 12 2014 18:23:49 ] [127.0.0.1] :
      You do not have permissions to assign the section <Media> to the object <OtherArticle>.
      

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              joao.inacio-obsolete@ez.no Joao Inacio (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 day
                  1d